News
Every CyberSIXT summary, newest first, with a link to its story and to the original report.
Most articles on Wed 21 Oct (96); 9–13 on weekend days.
- On CISA KEV CVEs
- Other coverage
Show as table
| Day | Articles published |
|---|---|
| Sun 11 Oct | 9 |
| Mon 12 Oct | 56 |
| Tue 13 Oct | 85 |
| Wed 14 Oct | 86 |
| Thu 15 Oct | 78 |
| Fri 16 Oct | 61 |
| Sat 17 Oct | 10 |
| Sun 18 Oct | 10 |
| Mon 19 Oct | 60 |
| Tue 20 Oct | 86 |
| Wed 21 Oct | 96 |
| Thu 22 Oct | 84 |
| Fri 23 Oct | 68 |
| Sat 24 Oct | 13 |
| Today, Sun 25 Oct | 13 so far |
Fri 26 Dec 2025· 21 articles
-
Trust Wallet warns users to update Chrome extension after $7M security loss
Trust Wallet has urged users to update its Chrome extension after a security incident that caused about $7 million in losses. The flaw affected version 2.68 of the multi‑chain, non‑custodial wallet, which is used by around one million users, and Trust Wallet…
Security Affairs -
Pro-Russian group Noname057 claims cyberattack on La Poste services
Pro-Russian hacking group Noname057 claimed responsibility for a cyberattack that disrupted La Poste’s digital banking and online services, as reported this week. La Poste confirmed a major incident knocked core information systems offline, affecting the…
Security AffairsNoName057(16) -
Trust Wallet Chrome Extension Breach Caused $7 Million Crypto Loss via Malicious Code
Trust Wallet has urged users to update its Chrome extension to the latest version after what it described as a security incident that led to the loss of approximately $7 million. The issue affects version 2.68, with the firm advising users to upgrade to…
The Hacker News -
Mentorship and Diversity: Shaping the Next Generation of Cyber Experts
December 26, 2025, Dark Reading author Kristina Beek presents an interview with Patricia Voight, CISO at Webster Bank, exploring how to advance cybersecurity careers, tackle financial crime, and champion diversity. Voight, who heads security for Webster Bank…
Dark Reading -
China-Linked Evasive Panda Ran DNS Poisoning Campaign to Deliver MgBot Malware
A China-linked advanced persistent threat group known as Evasive Panda was linked to a targeted cyber espionage campaign that poisoned DNS requests to deliver its MgBot backdoor in attacks aimed at victims in Türkiye, China and India. The activity, observed…
The Hacker NewsEvasive Panda -
Aflac confirms June data breach affecting over 22 million customers
Aflac has confirmed a June data breach affecting more than 22 million customers, with personal information including names, contact details, claims and health information, and Social Security numbers involved for some individuals. The company said suspicious…
Security Affairs -
CVE-2025-68664: Critical LangChain Flaw Enables Secret Extraction
CVE-2025-68664 is a serialization injection vulnerability in LangChain Core that affects how dumps() and dumpd() convert Python objects, enabling an attacker-controlled input to be misinterpreted as a trusted LangChain object during deserialization when…
SOCRadar -
Top 20 Ransomware Statistics You Should Know (2025)
Ransomware in 2025 shows a broader, more entrenched threat landscape, with 44% of breaches analysed in Verizon’s 2025 DBIR executive summary involving ransomware, and 39% of breaches in larger organisations, while SMBs faced ransomware in 88% of breaches.…
SOCRadar -
As More Coders Adopt AI Agents, Security Pitfalls Lurk in 2026
As 2026 approaches, Dark Reading reports that AI-assisted coding is accelerating, but security remains a serious concern as organisations plan to embed AI tools across development pipelines. A BaxBench benchmark shows Anthropic’s Claude Opus 4.5 Thinking…
Dark Reading -
Dark Reading Opens The State of Application Security Survey
Dark Reading opens The State of Application Security Survey, a new 2026 initiative building on last year’s findings, with Fahmida Y. Rashid, the Managing Editor, noting the aim is to uncover changes, improvements and new challenges in app security. December…
Dark Reading -
Spotify cracks down on unlawful scraping of 86 million songs
Spotify shut down user accounts after an open‑source group, Anna’s Archive, scraped 86 million songs from its library and published a database of tracks and metadata, with Spotify confirming it identified and disabled the involved accounts. The group said it…
Security Affairs -
Critical LangChain Core Vulnerability Exposes Secrets via Serialization Injection
A critical vulnerability has been disclosed in LangChain Core that allows a serialization injection attack to exfiltrate secrets and influence LLM responses, tracked as CVE-2025-68664 with a CVSS of 9.3. Security researcher Yarden Porat reported the flaw on…
The Hacker News -
The “D” is for Danger: How a Tiny Typo in MAS Activation Hijacks Your PC
The article explains that MAS, a well-known activation tool, provides a PowerShell command that fetches an activation script online and runs it immediately, offering convenience but requiring users to type or paste the command each time. The official MAS…
SecurityOnline -
Gmail’s Identity Revolution: How to Change Your Email Address Without Losing Data
Gmail is reportedly moving towards letting users change their @gmail[.]com address without creating a new account, with the process described as being rolled out “gradually” and not yet available to many users. According to the updated documentation, account…
SecurityOnline -
The Godfather’s Gambit: Why Yoshua Bengio Lies to AI to Get the Truth
Yoshua Bengio, described in the piece as one of the figures often dubbed the “godfathers of AI” and a professor at the University of Montreal, says that coaxing genuine insight from AI chatbots can require a counterintuitive tactic: lying to the AI itself.…
SecurityOnline -
The End of Neutrality? OpenAI’s Secret Plan to Embed Ads in ChatGPT’s “Brain”
According to The Information, OpenAI is reportedly seriously exploring advertising as a new monetisation path for ChatGPT, with plans that would go beyond simple banner ads. Insiders suggest the approach could embed advertising more deeply into the AI’s…
SecurityOnline -
Critical Flaw in Livewire Exposes Laravel Apps to Stealthy RCE, PoC Releases
A critical flaw in Livewire has been disclosed by security researchers, exposing Laravel-powered servers to remote code execution (RCE) via a stealthy PoC tool. The vulnerability, tracked as CVE-2025-54068, exploits Livewire’s hydration process and could…
SecurityOnline -
“Silver Fox” Unmasked: Chinese APT Group Impersonates Indian Tax Officials in Targeted Cyber Campaign
A new intelligence report from CloudSEK’s TRIAD identifies the Chinese APT group Silver Fox as the threat behind a targeted cyber campaign aimed at Indian organisations, with the attack described as a tax-themed phishing lure as tax season approaches. The…
SecurityOnlineVoid Arachne -
Microsoft Denies Plans to Rewrite Windows 11 in Rust Despite AI Ambitions
According to the LinkedIn post by Microsoft Distinguished Engineer Galen Hunt, there was talk of eliminating all C and C++ code from Microsoft’s codebase by 2030 and replacing it with Rust, a plan that many saw as enabling AI-assisted code generation. The…
SecurityOnline -
The Brazil Breakout: Apple Forced to Unlock iOS for Third-Party App Stores
According to details obtained by Brazilian tech outlet Tecnoblog, Brazil’s Administrative Council for Economic Defense (CADE) has approved a settlement with Apple that requires changes to how the iOS App Store operates in Brazil, allowing third-party app…
SecurityOnline -
The Inference Coup: NVIDIA’s $20B Groq Deal Swallows the TPU’s Creator
Groq has announced that it has signed a non-exclusive licensing agreement with NVIDIA covering inference technologies. The deal is framed as a licensing arrangement rather than a conventional acquisition, accompanied by a substantial personnel shift as…
SecurityOnline
